Information for job applicants
Information for data subjects as required by article 13 of EU Regulation 2016/679 of the European Parliament and Council (the “General Data Protection Regulation” or “GDPR”).
Under the current legislation on personal data protection (hereafter the “Regulation”), IBSA Farmaceutici Italia Srl (the “Company”), in its capacity as “Data Controller” (for details of its identity, see below), has a duty to provide certain information concerning its use of your personal data.
1. What data is processed and why
Your personal data are used for recruiting procedures, or to proceed with the verification of the conditions for hiring and / or for starting a collaboration and to follow up on the candidate's request.
In particular, the personal data processed are: your name, address, or other identifying particulars, work-related data, social security information, education and work experience, and any other information you include in your CV.
It may happen, exceptionally, that other personal data, termed “special” data by the Regulation, is also obtained. For example: in the course of selection an applicant, on the basis of disability, may be adjudged eligible for inclusion in one of the sheltered groups. Such “special” data includes information on racial and ethnic origin; religious, philosophic, and other beliefs; political opinions; and membership of political parties, trade unions, or associations or organisations of a religious, philosophic, political or trade-union related nature. It may also reveal a person’s state of health and their sex life.
2. Nature of the provision of the data and consent
The provision of the data for the purposes referred to in point 1 of this notice is optional, but essential for the performance of the activities indicated. In any event, consent to the processing of the data for these purposes is not necessary because the processing is essential for the fulfilment of a legal obligation that IBSA INSTITUT BIOCHIMIQUE SA is subject to.
We inform you that the fulfilment of a legal obligation pursuant to Article 6.1(c), and for reasons of public interest in accordance with Article 9.2(g),(i) of the GDPR, constitute the grounds for the lawfulness of the processing of your data for the purpose stated in this notice.
3. Methods of processing the data
The personal data provided may be processed through manual, computer and electronic means, using criteria strictly related to the purposes for which the data were collected and in any case designed to guarantee the security and confidentiality of the data processed and ensure that the processing is carried out anonymously.
Scope of "internal" circulation of the data
The data may be used by Company personnel who have been assigned a specific role and have been given suitable operational instructions to prevent the loss, destruction, unauthorised access or processing of the data. Your personal data will only be made accessible to persons, within the company organisation, that need the data because of their job or hierarchical position, with a duty of confidentiality.
Data processors - The data may also be used by third parties that perform activities on behalf of the Company. These third parties act as data processors and/or persons in charge of the processing, under the direction and control of the Company.
4. Storage of the data
The Data will be kept for the period strictly necessary to achieve the purposes for which they were collected. In any event, the criterion used to determine this period is based on compliance with the terms permitted by the applicable laws and the principles of minimisation of the processing and rational management of archives.
5. Communication of the data
In accordance with the laws and regulations that we are subject to, we may be required to communicate the data to the Ministry of Health, other authorities and healthcare associations in third countries outside the EU and to legitimate recipients in accordance with the law and the regulations. These parties will act as independent Data Controllers. With regard to the possible transfer of the Data to third countries outside the EU, including countries that may not provide the same level of protection envisaged by the applicable legislation, we inform you that the transfer of data abroad is subject to specific guarantees for the protection of personal data through the adoption of standard contractual clauses.
6. Rights of the data subject
You have the right to be informed at any time about your data held by the individual controllers, i.e. by the Company and the parties referred to above that we communicate your data to, and how they are used. You also have the right to have the data updated, supplemented, corrected or erased, to request their portability or restriction of processing, in the cases provided for by law, and to object to the processing of the data unless the individual controllers have a legitimate interest in the data. For the exercise of your rights, as well as the more detailed information about the parties or categories of parties to which the data are communicated and/or transferred or who have access to them as data processors or persons in charge of the processing, you can contact our data privacy officer, at IBSA Institut Biochimique SA, by e-mail at firstname.lastname@example.org or email@example.com or at the address indicated below to the attention of the data privacy officer.
Lastly, we remind you that you have the right to lodge a complaint with the competent Authorities if you consider that your rights have not been respected or that you have not received a response to your requests in accordance with the law.
7. Data Controller
The data controller is IBSA INSTITUT BIOCHIMIQUE SA, with registered office in Via al Ponte, 13, Massagno, Switzerland.
8. Data Protection Officer
The Company has appointed a person with responsibility for personal data protection (otherwise known as the Data Protection Officer or “DPO”).
Our DPO can be contacted at: firstname.lastname@example.org.